Can't verify azure token about jose HOT 3 CLOSED

I managed to resolve it and will add some notes here in case anyone else experiences the issue, but apparently Microsoft produces unverifiable tokens unless you add a special scope when requesting the access token. Its quite confusing but here are some docs for any future readers:

description of the issue

AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#609 (comment)

how to add a scope

https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-configure-app-expose-web-apis

oath client code with an example scope

export const oauth = new OAuth2Client({
  clientId: config.azureClientId,
  clientSecret: config.azureClientSecret,
  redirectUri: config.azureRedirectUri,
  authorizationEndpointUri:
    "https://login.microsoftonline.com/22dddbf3-6a10-486d-94dc-b3eca6a4d13e/oauth2/v2.0/authorize",
  tokenUri:
    "https://login.microsoftonline.com/22dddbf3-6a10-486d-94dc-b3eca6a4d13e/oauth2/v2.0/token",
  defaults: {
    scope: "api://ce608137-10fc-4b3e-824b-a3b601a2f424/Example openid",
  },
});

from jose.

Here is the open id configuration url:
https://login.microsoftonline.com/22dddbf3-6a10-486d-94dc-b3eca6a4d13e/.well-known/openid-configuration

from jose.

Hello @justinmchase

Using a valid azure token, I can't seem to figure out how to verify it using this library.

That's not something a bug tracker is for. There is no bug presented in your issue. Please open a q&a discussion instead for non-bugs.

If you are certain there is a bug in the library then please prepare actual steps to reproduce, that means code that can be copy pasted and run that ends with the issue reproduced.

from jose.